Accepting request 136341 from home:flichtenheld

Update to current to fix security issues

OBS-URL: https://build.opensuse.org/request/show/136341
OBS-URL: https://build.opensuse.org/package/show/system:packagemanager/devscripts?expand=0&rev=2
This commit is contained in:
Ismail Dönmez
2012-09-29 13:17:07 +00:00
committed by Git OBS Bridge
parent e642e187ec
commit e801ce433d
4 changed files with 17 additions and 4 deletions

View File

@@ -1,3 +1,16 @@
-------------------------------------------------------------------
Thu Sep 27 22:35:26 UTC 2012 - frank.lichtenheld@sophos.com
- update to devscripts-2.12.4
* dget: Fix CVE-2012-2241 (arbitrary file deletion)
* dscverify: Fix CVE-2012-2240 (arbitrary code execution)
* annotate-output: Fix to prevent symlink attack: don't delete
safely-created file and reuse its name. Instead, create temporary
directory and create FIFOs therein. Also, be sure to remove temporaries
upon catchable signal. Fixes CVE-2012-3500.
* debdiff: Fix regression in exit code, introduced in 2.11.4.
* see /usr/share/doc/packages/devscripts/changelog for details
-------------------------------------------------------------------
Fri Jul 6 21:56:48 UTC 2012 - frank.lichtenheld@sophos.com